]> granicus.if.org Git - sudo/commit
In sudoers_lookup() return VALIDATE_NOT_OK if the runas user was
authorTodd C. Miller <Todd.Miller@courtesan.com>
Thu, 27 May 2004 19:55:06 +0000 (19:55 +0000)
committerTodd C. Miller <Todd.Miller@courtesan.com>
Thu, 27 May 2004 19:55:06 +0000 (19:55 +0000)
commit5150db1db3db2c8b9b71f92e6a4d10b7b045a438
tree092d9583326673450496f043d14ae6ffb409a52f
parent406db89f136ab9c069c98c6ed7fc94d6ddc796e8
In sudoers_lookup() return VALIDATE_NOT_OK if the runas user was
explicitly denied and the command matched.  This fixes a long-standing
bug and makes:
    foo machine = (ALL) /usr/bin/blah
    foo machine = (!bar) /usr/bin/blah

equivalent to:
    foo machine = (ALL, !bar) /usr/bin/blah
parse.c